Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6R94JZWFvVTdSFXorKtVo5UUoaSEpjkhPFHNs1uz8NCE/0/3137372e38362e3131322e302f32322d3234203d3e20323632363238.roa
File:                     3137372e38362e3131322e302f32322d3234203d3e20323632363238.roa (raw, json)
Hash identifier:          T9P+Ejg0cE438BvCRTDgrtsVsvBTcIWbAn28GVMRjZs=
Subject key identifier:   A6:4C:7C:CE:2E:EF:EF:61:8F:CE:3A:BA:4F:10:06:1B:D6:79:A5:C3
Certificate issuer:       /CN=6948579E316A9E55A099D417D20BFC4B67593E45
Certificate serial:       03E49A9DEF6D4C1BAB1FD18D1134438B7F7226F5
Authority key identifier: 69:48:57:9E:31:6A:9E:55:A0:99:D4:17:D2:0B:FC:4B:67:59:3E:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6948579E316A9E55A099D417D20BFC4B67593E45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6R94JZWFvVTdSFXorKtVo5UUoaSEpjkhPFHNs1uz8NCE/0/3137372e38362e3131322e302f32322d3234203d3e20323632363238.roa
Signing time:             Wed 22 Nov 2023 20:25:34 +0000
ROA not before:           Wed 22 Nov 2023 20:20:34 +0000
ROA not after:            Wed 20 Nov 2024 20:25:34 +0000
asID:                     262628
IP address blocks:        177.86.112.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e4:9a:9d:ef:6d:4c:1b:ab:1f:d1:8d:11:34:43:8b:7f:72:26:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6948579E316A9E55A099D417D20BFC4B67593E45
        Validity
            Not Before: Nov 22 20:20:34 2023 GMT
            Not After : Nov 20 20:25:34 2024 GMT
        Subject: CN=A64C7CCE2EEFEF618FCE3ABA4F10061BD679A5C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7b:30:cb:71:23:55:b5:8b:8d:83:c8:2c:9f:
                    5d:5c:a5:d2:70:50:07:c4:c1:d4:ca:3e:de:b3:0d:
                    6a:20:07:3a:f0:88:c2:0c:b1:98:a9:c9:d6:9b:d0:
                    4d:b2:69:2f:15:cf:12:55:73:18:5a:1a:92:a3:21:
                    af:1f:d2:58:19:5f:8d:5d:d6:24:e1:68:2c:15:cd:
                    e5:8f:39:ca:1c:b1:1d:ee:ca:9d:06:74:1c:c5:88:
                    64:6e:d6:76:dc:fd:77:d3:ae:14:fd:2f:9b:e1:0a:
                    da:c6:3c:0e:13:6d:c6:56:6c:8d:94:53:f0:39:7a:
                    4e:0f:ab:fa:ca:a5:bb:d0:15:bf:aa:3d:50:3b:ba:
                    37:bf:01:c0:a1:e1:d2:8d:ac:62:dd:d2:5b:d7:10:
                    15:5c:4b:92:39:ff:c5:82:84:38:6b:8b:e7:4b:a0:
                    80:12:8e:f4:a8:f1:77:74:73:31:a7:9a:ce:3c:1a:
                    20:b7:3b:8d:20:3e:b2:95:1a:1b:6e:2a:4b:3c:9a:
                    f1:a6:3b:4c:ea:d9:aa:a1:39:7a:31:c2:ff:29:a9:
                    92:98:b4:4c:80:6e:97:d1:5d:d8:5e:77:7f:43:f0:
                    89:30:3b:26:53:d4:dc:ef:61:d6:2f:4d:60:27:c2:
                    d9:7d:d0:eb:c7:b9:83:65:f4:f3:ff:25:52:f4:36:
                    e7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4C:7C:CE:2E:EF:EF:61:8F:CE:3A:BA:4F:10:06:1B:D6:79:A5:C3
            X509v3 Authority Key Identifier:
                keyid:69:48:57:9E:31:6A:9E:55:A0:99:D4:17:D2:0B:FC:4B:67:59:3E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6R94JZWFvVTdSFXorKtVo5UUoaSEpjkhPFHNs1uz8NCE/0/6948579E316A9E55A099D417D20BFC4B67593E45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6948579E316A9E55A099D417D20BFC4B67593E45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6R94JZWFvVTdSFXorKtVo5UUoaSEpjkhPFHNs1uz8NCE/0/3137372e38362e3131322e302f32322d3234203d3e20323632363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:1f:25:fc:90:99:2c:dc:b6:c3:1d:0b:42:9c:b0:67:ad:5f:
         59:2c:11:ab:b9:75:99:ca:7f:66:69:d3:22:c2:df:84:65:46:
         98:45:b3:2f:a5:85:dc:98:26:07:ae:af:32:f0:01:1f:1e:bf:
         cd:ff:37:a5:a4:be:04:74:d6:c9:9d:b5:14:b6:6b:38:5b:2b:
         42:a2:a3:b0:67:0a:2b:f2:c3:6d:1f:53:8e:93:4e:f6:21:63:
         88:db:de:53:7e:8b:9c:e6:e9:f5:ab:cf:4c:47:f6:f4:2b:7e:
         dd:6e:d2:7b:a6:d1:e9:e8:1c:2a:c6:94:b1:5c:3d:26:e5:c3:
         b2:35:8c:86:c2:1d:9f:39:22:c9:f1:14:76:6f:8d:3d:f5:3c:
         fe:08:4b:68:75:a9:63:63:43:83:30:cf:3b:68:f7:c6:b9:f1:
         d2:1e:a9:04:18:9e:7c:87:85:31:bd:1d:76:a0:eb:29:de:18:
         a0:7b:d8:e1:a0:5c:fd:8c:cb:4d:b0:da:d4:bb:12:30:1d:75:
         69:dc:41:2d:5d:9b:32:36:93:cb:d6:a9:0d:89:f9:e7:50:32:
         53:11:18:9a:f9:ef:83:59:fb:d8:55:df:28:24:b2:7c:6d:71:
         82:77:a8:7b:47:b1:3b:80:b7:f6:4b:6b:fc:85:f8:3c:d3:1d:
         11:af:84:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:56 2025 by rpki-client